Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/aZjr0qSqsC5TZ--SIJBvp2KJX08.roa
File:                     aZjr0qSqsC5TZ--SIJBvp2KJX08.roa (raw, json)
Hash identifier:          x4NE0mEcj6rtLE+aPYcM/IbIItnWm2oIU15lzEKp71Q=
Subject key identifier:   69:98:EB:D2:A4:AA:B0:2E:53:67:EF:92:20:90:6F:A7:62:89:5F:4F
Certificate issuer:       /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial:       02225F17
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/aZjr0qSqsC5TZ--SIJBvp2KJX08.roa
Signing time:             Sat 01 Jan 2022 14:55:22 +0000
ROA not before:           Sat 01 Jan 2022 14:55:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212426
IP address blocks:        80.249.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35806999 (0x2225f17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
        Validity
            Not Before: Jan  1 14:55:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6998ebd2a4aab02e5367ef9220906fa762895f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0a:5e:81:f3:b8:fb:c3:a3:57:46:f7:61:f6:
                    92:32:f4:c2:aa:22:bb:4c:86:58:82:89:0c:fc:b0:
                    26:f9:6c:f1:65:37:70:c8:94:3c:f1:80:97:b2:83:
                    8b:99:35:33:e6:8d:87:40:a1:82:5d:e5:5d:39:fd:
                    f1:8b:f2:77:2c:d9:76:9c:b2:4a:cb:fd:a7:41:b8:
                    bd:c3:64:9b:99:1f:dc:a9:26:74:46:92:76:79:40:
                    de:7e:4f:e4:68:c6:be:7d:9f:46:4a:58:22:fe:86:
                    83:1c:d8:28:00:ea:3d:12:7b:59:fa:6a:a4:97:ab:
                    47:8f:ec:d1:6f:57:f0:33:ec:a7:7f:03:32:9f:b5:
                    5e:ea:9f:b9:47:d1:62:94:c4:ff:4a:73:38:e2:d5:
                    2b:2c:3a:40:f5:4c:60:39:a1:2c:cb:08:9f:b3:12:
                    cf:b3:ba:08:3b:75:ea:70:19:5a:82:9f:2f:d2:9c:
                    4e:d5:33:e7:b3:ac:21:06:53:a9:a5:cd:60:dd:25:
                    12:11:a9:a7:bd:14:42:73:92:fb:bf:63:f8:b7:c1:
                    24:18:17:27:b8:de:83:78:2f:52:a5:a2:9f:2b:42:
                    45:1e:5f:49:bd:59:b1:7e:7b:da:31:13:96:94:c9:
                    20:78:04:f0:69:73:f9:6d:01:37:17:a0:ed:73:a4:
                    83:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:98:EB:D2:A4:AA:B0:2E:53:67:EF:92:20:90:6F:A7:62:89:5F:4F
            X509v3 Authority Key Identifier:
                keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/aZjr0qSqsC5TZ--SIJBvp2KJX08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.249.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:75:96:9b:44:2e:13:9c:db:84:2f:44:86:2c:10:c0:1a:03:
         79:4b:45:6f:be:43:2c:3e:f4:c0:3b:dc:f5:40:a0:8c:8a:a8:
         8c:ba:89:76:ce:8d:81:4e:22:ee:31:e3:95:36:82:e7:18:da:
         a2:c9:7f:a4:8f:8e:7a:2d:d9:06:02:7b:aa:92:8b:e7:06:7c:
         7b:0f:9c:53:e5:7c:62:fe:d7:71:5a:25:52:12:fc:58:8f:c9:
         9b:43:68:c6:73:a3:7e:72:aa:1d:48:3d:03:cf:94:5b:d5:84:
         4d:4d:c5:f0:61:15:c2:3f:34:a5:3a:be:66:ef:25:25:9a:31:
         f7:76:ef:4e:24:a7:6b:01:2c:cf:ac:fc:aa:f5:5e:d2:e3:c3:
         4c:f7:da:42:ed:cb:4f:e8:26:bc:e2:53:7e:c4:53:d2:b7:ac:
         eb:b4:35:e0:bc:e7:59:1e:b0:20:dc:36:5e:90:eb:4f:62:e4:
         ed:f9:ea:db:0f:d6:85:00:18:7a:7a:5f:cb:8e:fe:b7:2f:68:
         3d:28:5d:90:26:af:80:8a:7c:c0:a4:8a:ac:34:2b:b0:78:be:
         95:df:9f:0e:75:74:7f:60:c3:8d:5d:b4:ef:5a:f4:60:8d:f7:
         f9:f0:70:e3:ed:75:a9:75:dc:df:bf:34:7d:1e:68:b5:28:d3:
         77:68:e5:e5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAiJfFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZTkzY2M4Y2NhODFmYTAwZGM1M2U3YjgwNzhlOTFiNWMxMWJhMmVmMB4XDTIyMDEw
MTE0NTUyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjk5OGViZDJhNGFh
YjAyZTUzNjdlZjkyMjA5MDZmYTc2Mjg5NWY0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO0KXoHzuPvDo1dG92H2kjL0wqoiu0yGWIKJDPywJvls8WU3
cMiUPPGAl7KDi5k1M+aNh0Chgl3lXTn98YvydyzZdpyySsv9p0G4vcNkm5kf3Kkm
dEaSdnlA3n5P5GjGvn2fRkpYIv6GgxzYKADqPRJ7WfpqpJerR4/s0W9X8DPsp38D
Mp+1XuqfuUfRYpTE/0pzOOLVKyw6QPVMYDmhLMsIn7MSz7O6CDt16nAZWoKfL9Kc
TtUz57OsIQZTqaXNYN0lEhGpp70UQnOS+79j+LfBJBgXJ7jeg3gvUqWinytCRR5f
Sb1ZsX572jETlpTJIHgE8Glz+W0BNxeg7XOkgzMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRpmOvSpKqwLlNn75IgkG+nYolfTzAfBgNVHSMEGDAWgBSuk8yMyoH6ANxT
57gHjpG1wRui7zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JwUE1qTXFCLWdEY1UtZTRCNDZSdGNFYm91OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvMTc5ODkxLTQxY2MtNGFhMC1hYjY4LWY0MDZjODNiM2ZiYS8x
L2FaanIwcVNxc0M1VFotLVNJSkJ2cDJLSlgwOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
MTc5ODkxLTQxY2MtNGFhMC1hYjY4LWY0MDZjODNiM2ZiYS8xL3JwUE1qTXFCLWdE
Y1UtZTRCNDZSdGNFYm91OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFD5gDANBgkqhkiG9w0BAQsFAAOC
AQEAhXWWm0QuE5zbhC9EhiwQwBoDeUtFb75DLD70wDvc9UCgjIqojLqJds6NgU4i
7jHjlTaC5xjaosl/pI+Oei3ZBgJ7qpKL5wZ8ew+cU+V8Yv7XcVolUhL8WI/Jm0No
xnOjfnKqHUg9A8+UW9WETU3F8GEVwj80pTq+Zu8lJZox93bvTiSnawEsz6z8qvVe
0uPDTPfaQu3LT+gmvOJTfsRT0res67Q14LznWR6wINw2XpDrT2Lk7fnq2w/WhQAY
enpfy47+ty9oPShdkCavgIp8wKSKrDQrsHi+ld+fDnV0f2DDjV2071r0YI33+fBw
4+11qXXc3780fR5otSjTd2jl5Q==
-----END CERTIFICATE-----